Solved

SBS2011 Shut down unexpectedly - Error log: Source User32,  event ID 1074 "No Title for this reason can be found"

Posted on 2014-04-04
4
4,096 Views
Last Modified: 2014-07-20
SBS2011 initiated a shutdown unexpectedly.  I trying to identify why the server suddenly shutdown.

Found in Event Log:

Log Name: System - Source = USER32, Event ID = 1074

The process c:\windows\system32\winlogin.exe (SBSERVER) has initiated the power off of computer SBSERVer on behalf of user NT AUTHORITY\SYSTEM for the following reason" No title for this reason could be found
Reason code 0x500ff
Shutdown Type: power off


Prior to this I found an event log for:

System /source = WAS/Event Id= 5117

A worker process with a process id of "21708" serving application pool "WsusPool" has requested a recycle because it has reached it's private memory limit

Could the WAS issue caused the shutdown?
0
Comment
Question by:Joemt
  • 3
4 Comments
 
LVL 12

Expert Comment

by:Imtiaz Hasham
Comment Utility
Windows Updates caused the restart.

Check the hardware logs to see why the shutdown wasn't graceful - I have had this issue before on a SBS - turns out, the hardware wasn't allowing graceful shutdown.
0
 

Author Comment

by:Joemt
Comment Utility
The Server again went down...I found this in the system log. Any ideas?

Log Name:      System
Source:        Microsoft-Windows-GroupPolicy
Date:          6/3/2014 5:05:28 PM
Event ID:      1058
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      SBSERVER.****.local
Description:
The processing of Group Policy failed. Windows attempted to read the file \\****.local\SysVol\****.local\Policies\{65AD712B-7661-4EC7-B609-8C3AC7770B7C}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
    <EventID>1058</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>1</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-06-03T23:05:28.606506600Z" />
    <EventRecordID>1436497</EventRecordID>
    <Correlation ActivityID="{9B6FA122-6787-4F81-AD46-D434970D2507}" />
    <Execution ProcessID="1004" ThreadID="7900" />
    <Channel>System</Channel>
    <Computer>SBSERVER.******.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="SupportInfo1">4</Data>
    <Data Name="SupportInfo2">816</Data>
    <Data Name="ProcessingMode">0</Data>
    <Data Name="ProcessingTimeInMilliseconds">17534</Data>
    <Data Name="ErrorCode">64</Data>
    <Data Name="ErrorDescription">The specified network name is no longer available. </Data>
    <Data Name="DCName">SBSERVER.*****.local</Data>
    <Data Name="GPOCNName">cn={65AD712B-7661-4EC7-B609-8C3AC7770B7C},cn=policies,cn=system,DC=*****,DC=local</Data>
    <Data Name="FilePath">\\*****.local\SysVol\beallaw.local\Policies\{65AD712B-7661-4EC7-B609-8C3AC7770B7C}\gpt.ini</Data>
  </EventData>
</Event>
0
 

Accepted Solution

by:
Joemt earned 0 total points
Comment Utility
WE now believe this was due to a faulty Power Supply. It has been changed out
0
 

Author Closing Comment

by:Joemt
Comment Utility
finally ended up with a error indicator on the server it self - corrected with new powers upply
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now